...
Whether the Shibboleth SP can consume a message signed with an algorithm other than SHA-1 depends on the underlying OpenSSL library. On RedHat version 4 (a very old, unsupported version) the OpenSSL version is old enough that it cannot consume messages signed, for example, with those any of the digest algorithms collectively known as SHA-2 (SHA-224, SHA-256, SHA-384 or SHA-512). The OpenSSL version cutoff point is 0.9.7.
...